PwC Risk IT Audit Associate / Senior Associate

About PwC Middle East

PwC is a global network of professional services with offices in 152 countries and nearly 328,000 professionals. For over 40 years, PwC has contributed to the Middle East’s transformation, partnering with governments and businesses to deliver sustainable solutions. Currently, over 12,000 professionals across the region, including Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Palestine, Qatar, Saudi Arabia, and the UAE, are involved in shaping the future of the region.

The Consulting Line of Service

PwC Consulting focuses on shaping strategies that redefine industries and drive national visions. The team partners with leaders to deliver transformative solutions in areas such as enterprise strategy, digital innovation, operational excellence, cyber resilience, and risk management. This environment values bold thinking, collaboration, and measurable impact.

Risk Consulting Business Unit

As part of the Risk Consulting team, professionals help organizations strengthen resilience and build trust by providing end-to-end advisory solutions. These solutions enable businesses to align objectives with regulatory requirements, mitigate risks, and meet the diverse needs of critical stakeholders. The practice offers services including Internal Audit, Enterprise Risk Management, Governance, Policies, and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity.

PwC Risk IT Audit Associate / Senior Associate Role in Riyadh

PwC Middle East is seeking an experienced professional for the role of Risk IT Audit Associate / Senior Associate in Riyadh, Riyadh. This full-time position requires 5-10 years of experience. The role involves working as part of a team of problem solvers, addressing complex business issues from strategy to execution within the Risk Consulting practice.

Key Responsibilities

• Collaborate with a diverse regional team to assist leading enterprises in identifying, analyzing, prioritizing, and responding to technology risks.
• Advise top management, cybersecurity, internal audit, compliance, and risk management functions on technology risk matters.
• Maintain an up-to-date understanding of the latest Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assess existing and emerging technology risks, and review and test the design and effectiveness of technology controls.
• Deliver actionable insights and recommendations to help safeguard clients’ systems and data against potential threats.
• Collaborate with regional and international teams to successfully deliver key projects.
• Conduct qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas and recommending risk response plans.
• Support and advise clients in mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management activities.
• Assess clients’ environments against leading international and regional security standards and frameworks, such as ISO27001, NIST CSF, ITILv4, and NCA-ECC, to support regulatory and compliance requirements.
• Contribute to building strong client relationships and the development of key accounts.

Professional Development

At PwC Middle East, all professionals are expected to embody the skills and behaviors of The PwC Professional framework, contributing to the firm's strategy while developing as leaders at every level. The firm offers continuous learning opportunities, digital upskilling, and a collaborative environment that values innovation, mentorship, and diversity.